Research Academy
My account Customers About Blog Careers Legal Contact Resellers
The Burp Suite User Forum was discontinued on the 1st November 2024.

Burp Suite User Forum

For support requests, go to the Support Center. To discuss with other Burp users, head to our Discord page.

SUPPORT CENTER DISCORD

Cross-site scripting (DOM-based)

Omar | Last updated: Jul 30, 2021 12:55PM UTC

Hi I have found a bug, The application may be vulnerable to DOM-based cross-site scripting. Data is read from window.location.hash and passed to $(), via $(window.location.hash) Her is the code: $(".highlight.tab-" + e).show(), $(".lang-specific." + e).show(), window.recacheHeights(), $(window.location.hash).get(0) && $(window.location.hash).get(0).scrollIntoView(!0) But i don't have any idea if is vulnerable to dom XSS? And if it is vulnerable, how can it be exploited? Thanks

Uthman, PortSwigger Agent | Last updated: Jul 30, 2021 02:00PM UTC